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AMENDMENTS TO THE CLAIMS 

Please amend the claims as follows: 

1. (Currently Amended) A quantum key distribution method employed on a 
quantum cryptosystem including a first communication apparatus that transmits photons onto a 
quantum communication path and a second communication apparatus that measures the photons, 
comprising: 

a check matrix creation step of each of the first communication apparatus and the second 
communication apparatus creating the same parity check matrices H(nxk); 

a random number generation step of the first communication apparatus generating a 
random number sequence (transmission data) and randomly determining a predetermined 
transmission code (base) by the first communication apparatus, and the second communication 
apparatus randomly determining a predetermined reception code (base); 

a photon transmission step of the first communication apparatus transmitting a photon 
onto the quantum communication path while the photon is in a quantum state specified by a 
combination of the transmission data and the transmission code; 

a photon reception step of the second communication apparatus measuring the photon 
transmitted on the quantum communication path to obtain reception data specified by the 
combination of the reception code and measurement result; 

a data deletion step of each of the first communication apparatus and the second 
communication apparatus deciding whether the measuring has been performed with an 
appropriate measuring apparatus, saving the reception data of n bits if the measuring has been 
performed with the appropriate measuring apparatus and transmission data that corresponds to 
the reception data, and discarding other pieces of the data; 

an error correction information notification step of the first communication apparatus 
notifying the second communication apparatus through a public communication path of error 
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correction information of k bits based on the parity check matrix H and the transmission data of 
n bits; 

an error correction step of the second communication apparatus correcting the error of the 
reception data based on the parity check matrix H, the reception data of n bits, and the error 
correction information; and 

a cryptographic key creation step of each of the first communication apparatus and the 
second communication apparatus discarding a part of pieces of the common information after 
correction according to public error correction information, creating a cryptographic key using 
information that has remained after discardin fi including; the amount of information of n-k bits , 
and setting the cryptographic key as a common key which is shared between first communication 
apparatus and the second communication apparatus. 

2. (Previously Presented) The quantum key distribution method according to claim 
1 , wherein the check matrix creation step includes: 

weight searching step of using finite affine geometry as a basic matrix and searching 
optimum row and column weight distributions of the parity check matrix by performing 
optimization of Gaussian approximation; and 

dividing step of dividing randomly the row and column weights of the finite affine 
geometry based on the optimum weight distribution by a predetermined procedure, and creating 
the parity check matrix H of a low-density parity check code in which both the row and column 
weights or one of the row and column weights is not uniform. 

3. (Previously Presented) The quantum key distribution method according to claim 
1, wherein the check matrix creation step includes creating an inverse matrix G _1 (nx(n-k)), which 
satisfies G _1 -G=I (unit matrix), from a creation matrix G((n-k)xn) satisfying "HG=0;" and 

the cryptographic key creation step includes discarding the part of pieces of the common 
information by the inverse matrix G" 1 . 
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4. (Previously Presented) The quantum key distribution method according to claim 
3, wherein the cryptographic key creation step includes: 

one of the communication apparatuses, out of the first communication apparatus and the 
second communication apparatus, creating a nonsingular random matrix R((n-k)x(n-k)) to act on 
the cryptographic key after discarding the part of pieces of the common information and 
informing the nonsingular random matrix R to other one of the communication apparatuses 
through the public communication path, 

the first communication apparatus and the second communication apparatus using the 
nonsingular random matrix R to create the cryptographic key. 

5. (Currently Amended) The quantum key distribution method according to claim 1 , 
wherein the check matrix creation step includes creating a mapping F to map an n-dimensional 
vector to an m-dimensional vector (m<n-k), the mapping F being one in which the number of 
elements of a reverse image (F-G)"'(v) in a composition mapping F-G of the mapping F and the 
creation matrix G satisfying "HG=0" is independent of an arbitrary m-dimensional vector v and 
is constant(2"" k " m ), and 

the cryptographic key creation step includes discarding a- the p art of pieces of the 
common information by the mapping F. 

6. (Previously Presented) The quantum key distribution method according to claim 
5, wherein the cryptographic key creation step includes: 

one of the communication apparatuses, out of the first communication apparatus and the 
second communication apparatus, creating a nonsingular random matrix R((n-k)x(n-k)) to act on 
the cryptographic key after discarding the part of pieces of the common information and 
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informing the nonsingular random matrix R to other one of the communication apparatuses 
through the public communication path, 

the first communication apparatus and the second communication apparatus using the 
nonsingular random matrix R to create the cryptographic key. 

7. (Previously Presented) The quantum key distribution method according to claim 
2, wherein the cryptographic key creation step includes performing random permutation to the 
column of the parity check matrix H, selecting specific "1" in the first column of finite affine 
geometry AG(2,2 S ) of a creation element of the parity check matrix H, exchanges a position of 
"1" through the public communication path, specifying the position (column) after the division 
corresponding to "1" from the parity check matrix after the random permutation and the position 
(column) after the division corresponding to "1" in each cyclically shifted column, and 
discarding the part of pieces of the common information corresponding to the specified position 
(column). 

8. (Previously Presented) The quantum key distribution method according to claim 
7, wherein the cryptographic key creation step includes: 

one of the communication apparatuses, out of the first communication apparatus and the 
second communication apparatus, creating a nonsingular random matrix R((n-k)x(n-k)) to act on 
the cryptographic key after discarding the part of pieces of the common information and 
informing the nonsingular random matrix R to other one of the communication apparatuses 
through the public communication path, 

the first communication apparatus and the second communication apparatus using the 
nonsingular random matrix R to create the cryptographic key. 

9. (Currently Amended) A communication apparatus on transmission side that 
transmits photons onto a quantum communication path, comprising: 
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a check matrix creation unit that creates a parity check matrix H(nxk) identical to a 
communication apparatus on reception side; 

a transmission unit that generates a random number sequence (transmission data), 
randomly determines a predetermined transmission code (base), transmits the photon onto the 
quantum communication path while the photon is in a quantum state specified by a combination 
of the transmission data and the transmission code, decides whether the measuring has been 
performed with an appropriate measuring apparatus in the communication apparatus on the 
reception side, saves the transmission data of n bits if the measuring has been performed with the 
appropriate measuring apparatus, and discards other pieces of the transmission data; 

an error correction information notifying unit that notifies the communication apparatus 
on the reception side of error correction information of k bits based on the parity check matrix H 
and the transmission data of n bits through a public communication path; and 

a cryptographic key creation unit that discards a part of pieces of the common 
information after error correction according to public error correction information, creates a 
cryptographic key using information that has remained after discardin g including the amount of 
information of n-k bits , and sets the cryptographic key as a common key which is shared with the 
communication apparatus on the reception side. 

10. (Previously Presented) The communication apparatus according to claim 9, 
wherein the check matrix creation unit uses finite affine geometry as a basic matrix, searches 
optimum row and column weight distributions of the parity check matrix by performing 
optimization of Gaussian approximation; 

divides randomly the row and column weights of the finite affine geometry based on the 
optimum weight distribution by a predetermined procedure; and 

creates the parity check matrix H of a low-density parity check code in which both the 
row and column weights or one of the row and column weights is not uniform. 
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11. (Previously Presented) The communication apparatus according to claim 9, 
wherein the check matrix creation unit further creates an inverse matrix G" ! (nx(n-k)), which 
satisfies G" 1 -G=I (unit matrix), from a creation matrix G((n-k)xn) satisfying "HG=0;" and 

the cryptographic key creation unit discards the part of pieces of the common information 
by the inverse matrix G" 1 . 

12. (Previously Presented) The communication apparatus according to claim 11, 
wherein the cryptographic key creation unit uses a nonsingular random matrix R((n-k)x(n-k)) as 
the cryptographic key after discarding the part of pieces of the common information. 

13. (Currently Amended) The communication apparatus according to claim 9, 
wherein the check matrix creation unit further creates a mapping F to map an n-dimensional 
vector to an m-dimensional vector (m<n-k), the mapping F being one in which the number of 
elements of a reverse image (F-G)"'(v) in a composition mapping FG of the mapping F and the 
creation matrix G satisfying "HG=0" is independent of an arbitrary m-dimensional vector v and 
is constant(2 n " k " m ); and 

the cryptographic key creation unit discards a — the p art of pieces of the common 
information by the mapping F. 

14. (Previously Presented) The communication apparatus according to claim 13, 
wherein the cryptographic key creation unit uses a nonsingular random matrix R((n-k)x(n-k)) as 
the cryptographic key after discarding the part of pieces of the common information. 

15. (Previously Presented) The communication apparatus according to claim 10, 
wherein the cryptographic key creation unit performs random permutation to the column of the 
parity check matrix H, selects specific "1" in the first column of finite affine geometry AG(2,2 S ) 

8 MKM/AMI/bms 



Application No. 10/528,075 Docket No.: 261 1-0233PUS1 

Amendment dated March 4, 2009 

Reply to Office Action of December 9, 2008 

of a creation element of the parity check matrix H, exchanges a position of "1" through the 
public communication path, specifies the position (column) after the division corresponding to 
"1" from the parity check matrix after the random permutation and the position (column) after 
the division corresponding to "1" in each cyclically shifted column, and discards the part of 
pieces of the common information corresponding to the specified position (column). 

16. (Previously Presented) The communication apparatus according to claim 15, 
wherein the cryptographic key creation unit uses a nonsingular random matrix R((n-k)x(n-k)) as 
the cryptographic key after discarding the part of pieces of the common information. 

17. (Currently Amended) A communication apparatus on reception side that 
measures photons on a quantum communication path, comprising: 

a check matrix creation unit that creates a parity check matrix H(nxk) identical to a 
communication apparatus on transmission side; 

a receiving unit that randomly determines a predetermined reception code (base), 
measures the photons on the quantum communication path, reproduces reception data specified 
by a combination of the reception code and measurement result, decides whether the measuring 
has been performed with an appropriate measuring apparatus, saves the reception data of n bits if 
the measuring has been performed with the appropriate measuring apparatus, and discards other 
pieces of the reception data; 

an error correction unit that corrects the error of the reception data based on error 
correction information of k bits received through a public communication path, the parity check 
matrix H, and the reception data of n bits; and 

a cryptographic key creation unit that discards a part of pieces of the common 
information after error correction according to public error correction information, creates a 
cryptographic key using information that has remained after discardin g including the amount of 
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information of n-k bits , and sets the cryptographic key as a common key which is shared with the 
communication apparatus on the transmission side. 

18. (Previously Presented) The communication apparatus according to claim 17, 
wherein the check matrix creation unit uses finite affine geometry as a basic matrix, searches 
optimum row and column weight distributions of the parity check matrix by performing 
optimization of Gaussian approximation; 

divides randomly the row and column weights of the finite affine geometry based on the 
optimum weight distribution by a predetermined procedure; and 

creates the parity check matrix H of a low-density parity check code in which both the 
row and column weights or one of the row and column weights is not uniform. 

19. (Previously Presented) The communication apparatus according to claim 17, 
wherein the check matrix creation unit further creates an inverse matrix G _1 (nx(n-k)), which 
satisfies G"'-G=I (unit matrix), from a creation matrix G((n-k)xn) satisfying "HG=0;" and 

the cryptographic key creation unit discards the part of pieces of the common information 
by the inverse matrix G" 1 . 

20. (Previously Presented) The communication apparatus according to claim 19, 
wherein the cryptographic key creation unit uses a nonsingular random matrix R((n-k)x(n-k)) as 
the cryptographic key after discarding the part of pieces of the common information. 

21. (Previously Presented) The communication apparatus according to claim 17, 
wherein the check matrix creation unit further creates a mapping F to map an n-dimensional 
vector to an m-dimensional vector (m<n-k), the mapping F being one in which the number of 
elements of a reverse image (FG)~'(v) in a composition mapping F-G of the mapping F and the 
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creation matrix G satisfying "HG=0" is independent of an arbitrary m-dimensional vector v and 
is constant(2 n ~ k ~ m ); and 

the cryptographic key creation unit discards the part of pieces of the common information 
by the mapping F. 

22. (Previously Presented) The communication apparatus according to claim 21, 
wherein the cryptographic key creation unit uses a nonsingular random matrix R((n-k)x(n-k)) as 
the cryptographic key after discarding the part of pieces of the common information. 

23. (Previously Presented) The communication apparatus according to claim 18, 
wherein the cryptographic key creation unit performs random permutation to the column of the 
parity check matrix H, selects specific "1" in the first column of finite affine geometry AG(2,2 S ) 
of a creation element of the parity check matrix H, exchanges a position of "1" through the 
public communication path, specifies the position (column) after the division corresponding to 
"1" from the parity check matrix after the random permutation and the position (column) after 
the division corresponding to "1" in each cyclically shifted column, and discards the part of 
pieces of the common information corresponding to the specified position (column). 

24. (Previously Presented) The communication apparatus according to claim 23, 
wherein the cryptographic key creation unit uses a nonsingular random matrix R((n-k)x(n-k)) as 
the cryptographic key after discarding the part of pieces of the common information. 
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